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AMENDMENT AND PRESENTATION OF CLAIMS 

Please replace all prior claims in the present application with the following claims, in 
which claims 1, 10, 19 through 21, 24, 27, 28, and 30 through 36 have been amended. 

1. (Currently Amended) A method for controlling access to an event, the method 
comprising: 

receiving, at a first network entity from a second network entity, a request to access event- 
based information available within a network and associated with an event, the second 
network entity being unknown to the first network entity prior to the first network entity 
receiving the request; 

receiving, at the first network entity, user consent to access to the event -based information by 
the second network entity , and automatically creating an authorization in response to 
receiving the consent, the consent being receivable and the authorization being creatable 
without use of a certificate from the second network entity and without verifying an 
identity of the second network entity, wherein the first network entity is configured to 
control access to the event-based information; 

transmitting the authorization from the first network entity to the second network entity; 

transmitting a subscription message from the second network entity to an event server 
configured to maintain the event, wherein the subscription message includes the 
authorization and an event package describing the event-based information , the 
authorization including subscription to notifications of the event-based information by the 
second network entity that does not require the second network entity to send out access 
requests prior to an expiration time of the subscription ; [[and]] 
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determining at the event server whether to accept the subscription message based upon the 
authorization. 



2. (Canceled) 

3 . (Previously Presented) The method of Claim 1 , wherein receiving a request comprises: 
receiving a trigger at the first network entity from the second network entity; and executing 

the trigger to thereby activate the request to access the event-based information. 

4. (Previously Presented) The method of Claim 1, wherein the receiving a consent to 
access the event-based information associated with the event comprises receiving a consent to 
access the event-based information associated with the event with at least one parameter 
including at least one of a predefined granularity, frequency or time period, and wherein creating 
an authorization comprises creating an authorization including the at least one parameter. 

5. (Previously Presented) The method of Claim 1, wherein determining whether to accept 
the subscription message comprises: 

verifying the authorization; and 

accepting the subscription message if the authorization is verified to thereby provide the 
second network entity with access to the event. 

6. (Previously Presented) The method of Claim 5, wherein verifying the authorization 
includes verifying that at least one of a predefined frequency or time period has not been 
exceeded. 
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7. (Previously Presented) The method of Claim 5, wherein verifying the authorization 
includes verifying a shared secret. 



8. (Previously Presented) The method of Claim 5, wherein accepting the subscription 
message comprises accepting the subscription message to thereby provide the second network 
entity with access to the event-based information with a predefined granularity. 

9. (Previously Presented) The method of Claim 1 further comprising storing the 
authorization in a cache such that the event server can retrieve the authorization in response to 
receiving at least one subsequent subscription message, wherein the at least one subsequent 
subscription message includes an event package describing the event -based information. 

10. (Currently Amended) A system for controlling access to an event, the system 
comprising: 

a first network entity; 
a second network entity; 

wherein the first network entity is configured to control access to event-based information 
available within a network and associated with an event, the first network entity being 
configured to receive, from the second network entity, a request to access event-based 
information, the second network entity being unknown to the first network entity prior to 
the first network entity receiving the request, 

wherein the first network entity is configured to receive user consent to access to the event- 
based information by the second network entity associated with the event , wherein the 
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first network entity is configured to automatically create an authorization in response to 
receiving the consent, and thereafter transmit the authorization, the consent being 
receivable and the authorization being creatable without use of a certificate from the 
second network entity and without verifying an identity of the second network entity, 

wherein the second network entity is configured to receive the authorization, and thereafter 
transmit a subscription message, wherein the subscription message includes the 
authorization and an event package describing the event-based information , the 
authorization includes subscription to notifications of the event -based information by the 
second network entity that does not require the second network entity to send out access 
requests prior to an expiration time of the subscription ; and 

an event server configured to maintain the event, wherein the event server is configured to 
receive the subscription message, and thereafter determine whether to accept the 
subscription message based upon the authorization. 

11. (Canceled) 

12. (Previously Presented) The system of Claim 10, wherein the first network entity being 
configured to receive the request includes being configured to: 

receive a trigger at the first network entity to thereby enable the first network entity to 
execute the trigger to thereby activate the request to access the event-based information. 

13. (Previously Presented) The system of Claim 10, wherein the first network entity is 
configured to further receive at least one parameter associated with the consent, wherein the at 
least one parameter includes a least one of a predefined granularity, frequency and time period, 

5 



NC34953US (P3475US00) Patent 

and wherein the first network entity is configured to create the authorization including the at least 
one parameter. 



14. (Previously Presented) The system of Claim 10, wherein the event server being 
configured to determine whether to accept the subscription message includes being configured to: 

verify the authorization; and 

accept the subscription message if the authorization is verified to thereby provide the second 
network entity with access to the event. 

15. (Previously Presented) The system of Claim 14, wherein the event server being 
configured to verify the authorization includes being configured to verify that at least one of a 
predefined frequency or time period has not been exceeded. 

16. (Previously Presented) The system of Claim 14, wherein the event server is configured 
to verify the authorization by verifying a shared secret. 

17. (Previously Presented) The system of Claim 14, wherein the event server is configured 
to accept the subscription message to thereby provide the second network entity with access to 
the event-based information with a predefined granularity. 

18. (Previously Presented) The system of Claim 10, wherein the event server maintains a 
cache, wherein the event server is configured to store the authorization in the cache such that the 
event server can retrieve the authorization in response to receiving at least one subsequent 



6 



NC34953US (P3475US00) Patent 

subscription message, and wherein the at least one subsequent subscription message includes an 
event package describing the event-based information. 



19. (Currently Amended) An apparatus comprising [[a]] at least one processor and [[a]] at 
least one memory storing executable instructions that in response to execution by the 
processor including computer program code, the at least one memory and the computer 
program code configured to, with the at least one processor, cause the apparatus or 
another apparatus to at least perform the following[[:]] i 

receive receiving , from a second network entity, a request to access event -based information 
available within a network and associated with an event maintained by an event server, 
the second network entity being unknown to the apparatus prior to the apparatus receiving 
the request, 

create cr e ating an authorization in response to a user interface receiving user consent to 
access to the event-based information by the second network entity , the consent being 
receivable and the authorization being crcatablc without use of a certificate from the 
second network entity and without verifying an identity of the second network entity, and 

direct directing transmission of the authorization to the second network entity to enable the 
second network entity to thereafter subscribe to the event based upon the authorization^ 
the authorization including subscription to notifications of the event -based information by 
the second network entity that does not require the second network entity to send out 
access requests prior to an expiration time of the subscription . 



20. (Currently Amended) The apparatus of Claim 19, wherein the apparatus is further 

caused to, triggerable based upon receipt of the request to access the event-based information, the 
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apparatus being triggerable to present a prompt to receive consent to access the event-based 
information before the user interface receives the consent. 



21. (Currently Amended) The apparatus of Claim 19, wherein the apparatus creates the 
creating an authorization comprises by creating an authorization including at least one parameter 
associated with the consent, wherein the at least one parameter includes at least one of a 
predefined granularity, frequency or time period, the at least one parameter having been received 
by the user interface. 

22. (Previously Presented) The method of Claim 1, wherein receiving consent comprises 
receiving consent to access event-based information related to the first network entity. 

23. (Previously Presented) The system of Claim 10, wherein the first network entity is 
configured to control access to event-based information related to the first network entity. 

24. (Currently Amended) The apparatus of Claim 19, wherein automatically creating an 
authorization comprises the apparatus automatically creating an creates the authorization in 
response to the user interface receiving consent to access event -based information related to the 
apparatus. 



25. (Previously Presented) The method of Claim 1, wherein receiving consent comprises 
receiving consent from a user of the first network entity via a user interface thereof. 
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26. (Previously Presented) The system of Claim 10, wherein the first network entity is 
configured to receive consent from a user of the first network entity via a user interface thereof. 



27. (Currently Amended) The apparatus of Claim 19, wherein automatically creating an 

authorization comprises the apparatus automatically creating an creates the authorization in 
response to the user interface receiving the consent from a user of the apparatus. 

28. (Currently Amended) A computer-readable storage medium carrying one or more 
sequences of one or more instructions which, when executed by one or more processors, cause an 
apparatus to at least perform the following steps method comprising : 

receiving, at a first network entity from a second network entity, a request to access event- 
based information available within a network and associated with an event maintained by 
an event server, the first n e twork entity apparatus being configured to control access to 
the event-based information, the second network entity being unknown to the fifst 
network entity apparatus prior to the first network entity apparatus receiving the request; 

receiving, via a user interface of a first network entity, user consent to access to the event- 
based information by the second network entity ; 

executing , at the first network entity, a software application to automatically create an 
authorization in response to the user interface receiving the consent, the consent being 
receivable and the authorization being creatable without use of a certificate from the 
second network entity and without verifying an identity of the second network entity; and 

transmitting the authorization from the first network entity to the second network entity to 
enable the second network entity to thereafter subscribe to the event based upon the 
authorization , the authorization including subscription to notifications of the event-based 
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information by the second network entity that does not require the second network entity 



to send out access requests prior to an expiration time of the subscription . 



29. (Canceled) 

30. (Currently Amended) The computer-readable storage medium method of Claim 28, 
wherein the apparatus is caused to further perform receiving a request comprises : 

receiving a trigger at the first network entity from the second network entity; and executing 
the trigger at the first network entity to thereby activate the request to access the event- 
based information. 

3 1 . (Currently Amended) The computer-readable storage medium method of Claim 28, 
wherein the apparatus is caused to further perform: receiving a consent to access th e e v e nt bas e d 
information associated with the event comprises receiving a consent to access the event-based 
information associated with the event with at least one parameter including at least one of a 
predefined granularity, frequency or time period, and wherein creating an authorization 
comprises creating an authorization including the at least one parameter. 

32. (Currently Amended) The computer-readable storage medium method of Claim 28, 
wherein the processor is configured to execute a software application to automatically create an 
authorization is automatically created in response to the user interface receiving consent to access 
event-based information related to the apparatus mobile station . 
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33. (Currently Amended) The computer-readable storage medium method of Claim 28, 
wherein receiving consent comprises receiving the consent is received from a user of the first 
network entity apparatus via a user interface thereof. 

34. (Currently Amended) The system method of Claim 1[[0]], wherein the subscription 
message transmitted by the second network entity has a positive, non zero zero expiration time. 

35. (Currently Amended) The apparatus of Claim 19, wherein directing transmission 
comprises directing transmission of the authorization to enable the second network entity to 
subscribe to the event according to a the subscription having has a non zero zero expiration time. 

36. (Currently Amended) The computer-readable storage medium method of Claim 28, 
dir e cting transmission compris e s directing transmission of the authorization to e nabl e th e s e cond 
network entity to subscribe to the event according to a the subscription having has a non zero 
zero expiration time. 
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